Refactor Security.UpdateUser() and .DeleteUser() to accept parameter of IUser instead of string

[jpdillingham]

For API consistency methods operating on resources should, unless named Find___(), accept parameters of the same resource type. Accepting locators such as name or fqn is redundant as the API generally provides a Find method.